Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa
File:                     40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa (raw, json)
Hash identifier:          Ix2aqx508jXR1QYW9zsVmrjV2BdxrKf+JJRPEgZTGgM=
Subject key identifier:   A0:25:E2:29:A8:3C:45:0E:A8:26:D2:4D:BA:C5:61:26:80:B7:0E:B5
Certificate issuer:       /CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6
Certificate serial:       010D0C9F4328584AC9DB9D57C7CEEDFCCB5C6200
Authority key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        207.154.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9d:57:c7:ce:ed:fc:cb:5c:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=104f8cef-87de-4c6b-899a-f40217895474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:16:ce:e1:89:89:49:31:4c:f6:b3:e9:42:
                    62:2d:d7:a7:f8:f0:8d:7a:ac:c3:2a:ed:66:31:30:
                    1c:6d:d7:88:40:d8:83:44:fd:7f:00:5b:fc:51:ac:
                    ce:06:00:2e:d1:c3:63:66:8d:c1:71:3f:d5:a0:a0:
                    51:f0:28:1a:a1:e9:45:b7:57:d8:f2:f5:51:60:5d:
                    17:ba:34:7f:c9:13:79:65:f5:a5:d9:99:65:66:8c:
                    37:0c:85:ee:48:1e:f3:05:fd:d2:39:08:86:f9:49:
                    08:86:50:ec:07:73:2a:61:39:51:7e:58:fa:e1:3d:
                    13:c5:d7:22:74:cc:b0:12:68:f7:64:6e:33:a8:d9:
                    28:81:63:a6:89:9c:2b:b3:2c:e2:89:ea:08:14:2a:
                    ba:82:d6:b0:a6:6f:82:f1:1e:8f:81:76:70:46:77:
                    6a:13:35:1f:30:4e:ab:4e:f4:91:88:0c:1a:cb:37:
                    26:fe:6d:33:c0:be:b5:6a:9a:48:5c:71:ca:17:9c:
                    01:94:37:e2:6a:b4:17:75:1e:b3:80:1f:d4:db:26:
                    2d:81:75:5e:43:ee:61:56:f9:d9:f0:31:3a:03:4c:
                    69:2f:ef:e0:52:94:cb:dd:e7:59:92:09:50:a7:13:
                    f9:ed:85:98:e6:62:9e:99:c4:5d:d0:fe:56:d9:5a:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:25:E2:29:A8:3C:45:0E:A8:26:D2:4D:BA:C5:61:26:80:B7:0E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl

            X509v3 Authority Key Identifier:
                keyid:F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.154.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:cf:1b:31:2a:a1:a9:c0:72:53:fb:3b:a8:45:3c:df:a0:
         d0:6d:ef:02:81:bb:f7:85:36:82:35:11:f1:54:9b:6c:29:79:
         80:cc:bb:28:de:fb:e9:42:23:99:af:74:d9:ae:ec:77:23:f8:
         59:9b:1f:04:43:6a:ed:99:16:c9:9c:3f:16:ed:ce:bf:06:99:
         3c:b1:d0:c6:c1:b4:ec:0e:93:8f:af:44:5b:13:67:24:07:11:
         2e:50:c1:9c:ec:73:31:dd:be:92:af:d6:3c:5d:92:5f:4e:d6:
         39:38:a3:d8:c4:7b:2a:13:5e:3e:ed:c8:e7:af:21:5c:15:6b:
         ed:44:1a:7f:21:61:72:8e:62:84:3f:9d:a5:c6:55:0f:1d:ca:
         29:e6:8e:a3:d9:6d:66:c9:fb:e1:95:aa:32:dc:e2:a4:6e:93:
         34:4d:8c:2a:8f:c5:d4:53:88:67:96:be:94:62:d8:89:24:7b:
         57:df:5b:ba:d9:35:27:8b:c7:e1:d8:53:1c:5a:cf:7c:5c:04:
         79:f9:77:1e:bd:e0:f5:11:3d:99:b4:85:8c:64:80:2c:d7:89:
         9d:bd:57:75:0f:e1:ec:16:e8:ac:03:4a:3e:d3:29:63:b0:9c:
         16:76:51:06:81:6f:7b:c8:e1:00:fd:9a:6c:98:38:88:3b:25:
         4d:28:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:33:59 2025 by rpki-client